Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3163303a3a2f34322d3432203d3e20323733383332.roa
File:                     323830333a383935303a3163303a3a2f34322d3432203d3e20323733383332.roa (raw, json)
Hash identifier:          WDW8nVCgs3Szd5gDziPB2m3qGDHh5jsYUrwONU2T6RU=
Subject key identifier:   A4:E9:1A:61:B7:E0:E6:58:E4:B0:4B:B9:5F:06:0A:EB:63:A4:CE:23
Certificate issuer:       /CN=E9198017297E2662957B6F27616FF7A44A81298A
Certificate serial:       2204DE7637CBFE35E902ACDEC94695679BE0EAFA
Authority key identifier: E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3163303a3a2f34322d3432203d3e20323733383332.roa
Signing time:             Fri 03 Jul 2026 01:50:42 +0000
ROA not before:           Fri 03 Jul 2026 01:45:42 +0000
ROA not after:            Fri 02 Jul 2027 01:50:42 +0000
asID:                     273832
IP address blocks:        2803:8950:1c0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:04:de:76:37:cb:fe:35:e9:02:ac:de:c9:46:95:67:9b:e0:ea:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9198017297E2662957B6F27616FF7A44A81298A
        Validity
            Not Before: Jul  3 01:45:42 2026 GMT
            Not After : Jul  2 01:50:42 2027 GMT
        Subject: CN=A4E91A61B7E0E658E4B04BB95F060AEB63A4CE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:41:83:a1:da:a3:d1:75:3b:b1:25:bd:33:
                    f5:ad:ac:d5:ce:20:99:cc:cc:2d:fa:f9:f6:1e:08:
                    d8:cb:3d:08:7d:d9:65:69:41:d5:fc:76:c9:b9:c7:
                    f3:0f:46:a9:70:7f:bd:91:c6:b1:32:97:f2:50:01:
                    62:87:ab:f0:92:c8:74:63:48:95:d8:40:52:95:d6:
                    d4:9f:82:f0:cf:9b:4d:75:28:ef:cc:af:11:00:5b:
                    5b:b8:cf:e9:e4:5f:71:b8:a9:f0:75:d4:1b:a8:22:
                    2c:7c:1a:08:0a:30:94:e3:4b:3b:28:44:e3:bf:bd:
                    36:3b:1f:f9:db:77:a2:2f:e9:0c:70:d7:e4:94:05:
                    fe:4a:06:ef:0d:d5:58:4e:b6:2b:5a:36:d1:29:fe:
                    6a:2a:bb:e7:bf:fc:7b:39:e4:f2:c2:62:7f:25:02:
                    33:a5:bb:66:39:7a:83:63:52:c5:f6:5e:3e:e4:f3:
                    b9:22:59:21:ef:a7:89:3b:d7:e7:56:34:16:ec:b2:
                    2d:66:80:3e:c6:43:61:8b:98:38:fe:60:97:4a:ee:
                    e1:2d:68:d5:95:ab:d3:48:35:a3:37:73:05:a1:a1:
                    b5:1a:c2:a3:2e:6c:46:59:55:58:28:76:11:47:c2:
                    0d:6c:d0:b5:b8:cc:62:12:2d:f7:8c:89:70:6a:bc:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E9:1A:61:B7:E0:E6:58:E4:B0:4B:B9:5F:06:0A:EB:63:A4:CE:23
            X509v3 Authority Key Identifier:
                keyid:E9:19:80:17:29:7E:26:62:95:7B:6F:27:61:6F:F7:A4:4A:81:29:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/E9198017297E2662957B6F27616FF7A44A81298A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9198017297E2662957B6F27616FF7A44A81298A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2A41F8E29B375E45E90E01AB27A74A6557BE70B81FFDB5F563A9ECC355E0B1/0/323830333a383935303a3163303a3a2f34322d3432203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8950:1c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         39:76:fd:6a:99:6b:a0:7c:66:d3:20:a4:50:66:67:f0:36:ce:
         53:a9:a6:c7:02:00:5a:6f:34:10:cd:b5:a7:b0:fb:2e:3f:0e:
         2b:cd:58:5e:4a:f3:8d:cb:52:59:90:57:16:4d:8f:72:eb:15:
         9d:64:42:9b:36:2a:ed:cc:98:58:ec:ec:8c:78:6a:c2:89:74:
         c5:e8:a7:49:5a:96:0a:64:e0:f9:8e:54:fd:e9:47:66:9d:a1:
         88:f4:18:e8:67:e4:09:7e:fc:d0:b3:ed:d7:6e:0a:e0:03:7f:
         ac:8c:51:53:49:94:07:bd:e1:4f:37:76:bc:87:54:2c:85:ac:
         88:ef:cd:f9:4d:56:45:1b:d5:71:25:56:3c:14:01:90:ba:07:
         92:26:9b:fa:53:ce:eb:11:4d:6c:2e:39:f4:ea:b7:4a:4f:fc:
         e1:19:ea:b6:2e:0c:d7:52:62:34:ef:0b:ac:4f:42:1b:37:b6:
         fc:05:f4:f7:4b:70:ae:59:6f:72:9a:79:7d:37:6a:24:0e:9a:
         7b:4d:30:81:31:35:f5:68:c8:7f:5e:a8:dc:d6:8a:f3:70:64:
         f6:c0:07:53:20:d0:e0:97:3d:cc:62:d5:4c:d3:fa:d7:5f:30:
         12:08:8d:ec:a6:2b:2e:7c:1d:0b:cd:13:ca:32:05:76:0e:3c:
         ed:e0:82:dd
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUIgTedjfL/jXpAqzeyUaVZ5vg6vowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkxOTgwMTcyOTdFMjY2Mjk1N0I2RjI3NjE2RkY3QTQ0
QTgxMjk4QTAeFw0yNjA3MDMwMTQ1NDJaFw0yNzA3MDIwMTUwNDJaMDMxMTAvBgNV
BAMTKEE0RTkxQTYxQjdFMEU2NThFNEIwNEJCOTVGMDYwQUVCNjNBNENFMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EEGDodqj0XU7sSW9M/WtrNXO
IJnMzC36+fYeCNjLPQh92WVpQdX8dsm5x/MPRqlwf72RxrEyl/JQAWKHq/CSyHRj
SJXYQFKV1tSfgvDPm011KO/MrxEAW1u4z+nkX3G4qfB11BuoIix8GggKMJTjSzso
ROO/vTY7H/nbd6Iv6Qxw1+SUBf5KBu8N1VhOtitaNtEp/moqu+e//Hs55PLCYn8l
AjOlu2Y5eoNjUsX2Xj7k87kiWSHvp4k71+dWNBbssi1mgD7GQ2GLmDj+YJdK7uEt
aNWVq9NINaM3cwWhobUawqMubEZZVVgodhFHwg1s0LW4zGISLfeMiXBqvHy9AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUpOkaYbfg5ljksEu5XwYK62OkziMwHwYDVR0j
BBgwFoAU6RmAFyl+JmKVe28nYW/3pEqBKYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjJBNDFGOEUyOUIzNzVFNDVFOTBFMDFBQjI3QTc0QTY1
NTdCRTcwQjgxRkZEQjVGNTYzQTlFQ0MzNTVFMEIxLzAvRTkxOTgwMTcyOTdFMjY2
Mjk1N0I2RjI3NjE2RkY3QTQ0QTgxMjk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTE5ODAxNzI5N0UyNjYyOTU3
QjZGMjc2MTZGRjdBNDRBODEyOThBLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUIyQTQxRjhFMjlCMzc1RTQ1RTkwRTAxQUIyN0E3NEE2NTU3QkU3MEI4
MUZGREI1RjU2M0E5RUNDMzU1RTBCMS8wLzMyMzgzMDMzM2EzODM5MzUzMDNhMzE2
MzMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIzNzMzMzgzMzMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcGKAOJUAHAMA0GCSqGSIb3DQEBCwUAA4IBAQA5dv1qmWugfGbTIKRQZmfwNs5T
qabHAgBabzQQzbWnsPsuPw4rzVheSvONy1JZkFcWTY9y6xWdZEKbNirtzJhY7OyM
eGrCiXTF6KdJWpYKZOD5jlT96UdmnaGI9BjoZ+QJfvzQs+3XbgrgA3+sjFFTSZQH
veFPN3a8h1QshayI7835TVZFG9VxJVY8FAGQugeSJpv6U87rEU1sLjn06rdKT/zh
Geq2LgzXUmI07wusT0IbN7b8BfT3S3CuWW9ymnl9N2okDpp7TTCBMTX1aMh/Xqjc
1orzcGT2wAdTINDglz3MYtVM0/rXXzASCI3spisufB0LzRPKMgV2Djzt4ILd
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:18:32 2026 by rpki-client